WooYun.org

http://women.sohu.com/xingzuo/Templates/recommend.php3?id=<?
http://women.sohu.com/xingzuo/Templates/sendinfo.php3?id=<?
<?
$oraconn = OCILogon("women","women","women");
if ($oraconn <= 0)
{
echo "<META HTTP-EQUIV=\"REFRESH\" CONTENT=\"0; URL=errlogin.html\">";
OCILogOff($oraconn);
exit;
}
if(isset($id) and isset($words) and isset($name) and isset($mailadd)){
$strSql= "insert into women_test(id,words,pname,mailadd,createtime ) values('$id','$words','$name','$mailadd','".date(m)."-".date(d)."')";
$hstrSql = OCIParse($oraconn,$strSql);
$hret = ociexecute($hstrSql);
}
$strSql="select * from women_testview where id ='$id' and rownum <15";
$hstrSql2 = OCIParse($oraconn,$strSql);
$hret2 = ociexecute($hstrSql2);
$hret2=ocifetch($hstrSql2);
?>